Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/W8Dpmpt_1-01qSbotVM15n3GSek.roa
File: W8Dpmpt_1-01qSbotVM15n3GSek.roa (raw, json)
Hash identifier: 8bMbdbcHjYf7KXHu+ym0lwgv0cPY/hCCrTp1Qv0O4sU=
Subject key identifier: 5B:C0:E9:9A:9B:7F:D7:ED:35:A9:26:E8:B5:53:35:E6:7D:C6:49:E9
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 01942143D20F9EA87CD0543A8A3E94821B15
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/W8Dpmpt_1-01qSbotVM15n3GSek.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 45.80.175.0/24 maxlen: 24
2a13:7c40:1::/48 maxlen: 48
2a13:7c40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d2:0f:9e:a8:7c:d0:54:3a:8a:3e:94:82:1b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bc0e99a9b7fd7ed35a926e8b55335e67dc649e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:cc:e0:cc:1e:cc:d5:8e:f4:7d:b4:93:60:
af:7f:df:9a:00:4f:1a:36:60:d1:a5:da:c3:0c:6b:
0d:a5:77:94:d2:eb:5a:7c:2b:54:24:f0:16:39:22:
eb:40:60:9d:41:bb:98:4b:02:b8:55:38:4d:2c:d8:
21:87:3a:4c:5e:a2:bd:bf:8d:eb:db:5e:29:64:65:
51:61:0c:25:9e:45:3a:09:c0:a0:f6:95:f9:0b:32:
40:e9:99:73:01:59:78:bd:7c:2d:25:34:df:ef:ca:
e2:41:5e:77:44:ac:1d:9c:ff:17:45:ee:25:e3:d0:
b8:79:4e:74:bc:f5:ff:61:80:33:60:a6:b9:c3:bb:
f9:60:48:67:4a:e2:28:b1:54:39:1d:cc:90:7e:d0:
91:ad:f3:12:65:a0:c2:60:74:ff:87:fc:c6:82:d0:
02:3d:e8:a3:6d:81:3d:bd:6d:ee:62:c4:0f:d6:18:
be:cc:09:ed:72:f1:f7:e4:ec:a2:3f:c3:0a:3d:41:
07:8c:59:13:62:8e:af:91:e0:a3:a6:5c:e5:62:8d:
d1:67:43:1a:04:78:31:a9:9c:72:07:39:b0:2c:4f:
fd:4c:05:f2:eb:39:8b:3c:e1:66:4d:aa:2e:a4:3f:
1d:57:e9:b7:bb:eb:98:f3:b5:8d:b3:c8:3c:a7:50:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C0:E9:9A:9B:7F:D7:ED:35:A9:26:E8:B5:53:35:E6:7D:C6:49:E9
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/W8Dpmpt_1-01qSbotVM15n3GSek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.175.0/24
IPv6:
2a13:7c40:1::-2a13:7c40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:2b:19:be:fc:ca:41:75:14:d1:e4:ec:b1:f1:8c:2d:3d:ac:
72:78:10:41:84:f7:21:5a:02:c7:ba:b2:85:88:83:6f:c9:10:
0d:03:f2:f2:2c:e2:a6:61:7c:2b:47:94:63:88:d3:3a:34:d3:
44:0b:b9:d2:12:3b:37:e8:01:8e:7b:1e:8e:8a:82:f8:2b:14:
80:03:e6:60:28:a5:3f:16:91:9f:45:de:b7:43:6a:15:65:95:
5d:9d:c3:9a:54:da:06:fd:25:a8:b9:a1:8c:c3:b6:60:d9:b4:
06:78:12:c8:a5:20:6f:44:c6:c2:22:c5:30:68:24:7a:c9:8a:
8a:a3:a0:3d:f5:b0:9e:32:ef:c3:3d:3f:22:6a:0a:25:27:1e:
32:c5:73:72:17:e3:d0:d0:ab:b4:4f:4f:9c:e4:0b:1e:a4:c6:
b1:66:b3:9b:1c:cf:f7:05:50:9a:0f:e7:6f:02:61:68:54:90:
84:0d:72:d7:09:49:c0:2d:d5:e6:43:60:be:7a:aa:40:10:d0:
d3:e6:dd:75:1c:91:00:80:fd:0f:7a:7b:c8:69:d6:90:41:e7:
2c:2a:eb:b2:27:c2:33:37:1e:a6:e0:f5:4a:60:37:8a:a4:34:
f6:d2:4f:c8:1f:45:e8:60:92:a9:c2:aa:2a:3e:73:a4:7f:3a:
9a:dd:08:5f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQhQ9IPnqh80FQ6ij6UghsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMDEwOTM4ZDllZjcyMTU4ZmM5OGJkNDVkZTcxYjBiMWE5
ZmY3MjkwHhcNMjUwMTAxMDk0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmMwZTk5YTliN2ZkN2VkMzVhOTI2ZThiNTUzMzVlNjdkYzY0OWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+TM4MwezNWO9H20k2Cvf9+aAE8a
NmDRpdrDDGsNpXeU0utafCtUJPAWOSLrQGCdQbuYSwK4VThNLNghhzpMXqK9v43r
214pZGVRYQwlnkU6CcCg9pX5CzJA6ZlzAVl4vXwtJTTf78riQV53RKwdnP8XRe4l
49C4eU50vPX/YYAzYKa5w7v5YEhnSuIosVQ5HcyQftCRrfMSZaDCYHT/h/zGgtAC
PeijbYE9vW3uYsQP1hi+zAntcvH35OyiP8MKPUEHjFkTYo6vkeCjplzlYo3RZ0Ma
BHgxqZxyBzmwLE/9TAXy6zmLPOFmTaoupD8dV+m3u+uY87WNs8g8p1AjRwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFvA6Zqbf9ftNakm6LVTNeZ9xknpMB8GA1UdIwQY
MBaAFN0BCTjZ73IVj8mL1F3nGwsan/cpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYt
Y2VmZjU0NmM5MzNlLzEvVzhEcG1wdF8xLTAxcVNib3RWTTE1bjNHU2VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jM2Y0MTktYTU5Ni00NmJlLThhZmYtY2VmZjU0NmM5MzNl
LzEvM1FFSk9ObnZjaFdQeVl2VVhlY2JDeHFmOXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQALVCvMBoE
AgACMBQwEgMHACoTfEAAAQMHACoTfEAAAjANBgkqhkiG9w0BAQsFAAOCAQEAVCsZ
vvzKQXUU0eTssfGMLT2scngQQYT3IVoCx7qyhYiDb8kQDQPy8izipmF8K0eUY4jT
OjTTRAu50hI7N+gBjnsejoqC+CsUgAPmYCilPxaRn0Xet0NqFWWVXZ3DmlTaBv0l
qLmhjMO2YNm0BngSyKUgb0TGwiLFMGgkesmKiqOgPfWwnjLvwz0/ImoKJSceMsVz
chfj0NCrtE9PnOQLHqTGsWazmxzP9wVQmg/nbwJhaFSQhA1y1wlJwC3V5kNgvnqq
QBDQ0+bddRyRAID9D3p7yGnWkEHnLCrrsifCMzcepuD1SmA3iqQ09tJPyB9F6GCS
qcKqKj5zpH86mt0IXw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:16 2025 by rpki-client